[tbaher]

Excellent procedure, never thought of doing that,
here's what I did with the registry (on winxp)

Start -> Run -> Regedit

HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\Scsi\
look in the port keys (scsi port x) for one that has SCSI Bus X\target id x\logical unit x with a value of the device name used for demon tools "generic DVD" for example or whatever you called it in the daemon tools config
right click on that port entry and select permissions
check "deny" on "read" and "full control" for the list of users/groups that are there.
apply.

do the same for the port that has blindwrite

now my question is this: do i need to deny all users or just "administrators" or "system"